Configuring Gre Site To Site With Ipsec - Avaya 1000 Series Configuration Manual

Configuring GRE Site to Site with IPSec

This example extends the first example by adding encryption to the tunnel.
1. Prepare the WAN link:
2. Configure the tunnel:
3. Configure the routes:
4. Define the policy:
5. Check the status of the tunnel by entering:
6. Validate the tunnel configuration by entering:
Avaya Secure Router 1000 Series Configuration Guide
SR> configure terminal
Router/ configure> interface bundle wan1
Router/ configure/interface/bundle wan1> link t1 1
Router/ configure/interface/bundle wan1> encapsulation ppp
Router/ configure/interface/bundle wan1> ip address
192.168.94.220 255.255.255.0
Router/ configure/interface/bundle wan1> crypto untrusted
Router/ configure/interface/bundle wan1> exit
Router/ configure> interface tunnel t0
Router/ configure/interface/tunnel t0> ip address 103.1.1.2 24
Router/ configure/interface/tunnel t0> tunnel source
192.168.94.220
Router/ configure/interface/tunnel t0> tunnel destination
192.168.55.75
Router/ configure/interface/tunnel t0> tunnel protection
grecisco secretkeyfortest
Router/ configure/interface/tunnel t0> crypto untrusted
Router/ configure/interface/tunnel t0> exit
Router/ configure> ip route 0.0.0.0 0.0.0.0 192.168.94.254
Router/ configure> ip route 40.1.1.0 24 t0
SR/ configure > firewall internet
SR/configure/firewall internet> policy 100 in proto gre self
SR/configure/firewall internet/policy 100 in> exit
SR/configure/firewall internet> policy 101 in service ike self
SR/configure/firewall internet/policy 101 in> exit 2
SR/configure> firewall corp
SR/configure/firewall corp> policy 100 in self
SR> show ip interface tunnel t0
Configuring GRE Site to Site with IPSec
December 2010 181